Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/5e224ae1-808a-3754-8044-eaca79be6972.roa
File:                     5e224ae1-808a-3754-8044-eaca79be6972.roa (raw, json)
Hash identifier:          7zoJqHu0dJRCXjZVMnnA6kWM5io0TE3hcoGr16qQhIU=
Subject key identifier:   16:6B:4D:83:CB:D6:FD:60:0F:6B:8E:BD:47:3C:F4:FA:69:0A:06:CA
Certificate issuer:       /CN=b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d
Certificate serial:       010D0C9F4328584824FA8FFF6A9E0EDE5E6FB900
Authority key identifier: B7:6B:5F:18:8A:61:5B:23:82:C3:F2:A9:75:14:55:A5:21:B1:87:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/5e224ae1-808a-3754-8044-eaca79be6972.roa
Signing time:             Mon 09 Dec 2024 02:00:40 +0000
ROA not before:           Mon 09 Dec 2024 02:00:40 +0000
ROA not after:            Sun 09 Mar 2025 02:00:40 +0000
asID:                     198949
IP address blocks:        64.45.64.0/18 maxlen: 24
                          65.18.0.0/18 maxlen: 24
                          65.18.64.0/19 maxlen: 24
                          65.18.96.0/20 maxlen: 24
                          141.114.0.0/16 maxlen: 24
                          204.197.0.0/17 maxlen: 24
                          207.166.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:24:fa:8f:ff:6a:9e:0e:de:5e:6f:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d
        Validity
            Not Before: Dec  9 02:00:40 2024 GMT
            Not After : Mar  9 02:00:40 2025 GMT
        Subject: CN=ded4a971-ca7f-4735-b2c1-75165b18b6fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:20:be:db:3f:1b:a9:59:e6:25:a0:e2:dc:f1:
                    49:5b:bd:87:68:32:18:4a:96:a4:c0:18:92:ef:c5:
                    80:8b:90:95:3c:66:d9:70:f7:a7:21:f8:0c:e0:9f:
                    26:f0:41:f2:8c:54:bf:e5:80:19:b3:7e:86:bc:53:
                    49:b9:d0:1b:76:a2:15:0a:7e:f1:b8:ed:37:e3:35:
                    10:50:6d:3a:57:75:06:36:fc:18:ce:7f:a3:2e:62:
                    39:62:98:17:af:d1:66:eb:35:d8:27:1c:de:94:36:
                    a1:ab:c1:e5:18:9d:b1:ff:5d:bb:71:19:0e:e1:6d:
                    9a:f5:b1:e6:e3:b1:96:59:62:06:27:92:e0:7f:32:
                    c2:05:21:a2:9c:12:28:83:84:3d:6b:d4:d5:74:f6:
                    0b:15:8d:50:8a:38:16:c0:dc:a5:ac:c8:89:de:27:
                    43:1b:be:16:d9:37:e3:79:16:d7:6e:7b:e6:b6:a7:
                    ac:0e:e3:29:f5:d6:6b:f9:6a:2e:1e:dc:aa:a6:a2:
                    e3:92:32:23:d5:05:02:d2:da:c3:f1:60:f5:2c:8f:
                    a4:da:9f:d3:e3:30:0b:88:5a:7c:44:41:cf:91:ad:
                    4f:d7:b1:ab:1e:da:1b:75:10:4f:66:19:56:d0:6b:
                    2d:5f:b6:94:f6:3b:18:fa:21:3b:a7:08:9c:3b:49:
                    99:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:6B:4D:83:CB:D6:FD:60:0F:6B:8E:BD:47:3C:F4:FA:69:0A:06:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/5e224ae1-808a-3754-8044-eaca79be6972.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.crl

            X509v3 Authority Key Identifier:
                keyid:B7:6B:5F:18:8A:61:5B:23:82:C3:F2:A9:75:14:55:A5:21:B1:87:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.45.64.0/18
                  65.18.0.0-65.18.111.255
                  141.114.0.0/16
                  204.197.0.0/17
                  207.166.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:98:99:60:1e:e1:2a:58:ec:c9:3f:d5:a3:01:ef:d7:40:79:
         d2:fe:e3:74:06:fc:eb:99:16:fc:6c:ec:9f:04:7b:18:52:af:
         97:0a:03:48:ca:4b:45:37:6b:d4:b4:35:d9:36:61:23:84:ac:
         dc:3b:81:b8:65:cb:c1:bf:db:8c:47:86:3d:ed:ff:0e:66:bd:
         e0:40:90:ee:4c:9c:06:28:3b:fe:ba:33:de:a8:cd:de:8a:01:
         a5:aa:7b:e0:df:b3:ca:f5:25:96:a7:cc:03:1b:a6:24:ce:06:
         7c:f0:2c:8c:1e:2f:59:3e:b9:11:23:aa:28:43:b0:cc:69:90:
         2d:85:96:78:1f:71:44:84:76:37:09:2e:7b:1c:42:58:d0:00:
         87:95:87:7e:f0:ad:8b:06:6f:6b:f9:bc:a6:4c:f0:c8:83:11:
         f2:e9:da:b0:19:40:71:f4:83:36:09:3e:78:28:07:10:35:82:
         52:0a:9d:de:fd:b1:2a:0d:23:fa:97:7a:b7:78:f4:58:cd:a0:
         21:9f:c8:8a:5b:5c:c2:dc:09:4a:82:fc:c9:8b:89:55:7d:fe:
         a0:5a:53:a7:6d:77:31:21:81:6e:b4:03:1b:e4:d4:ab:7b:3a:
         39:95:c7:9d:e3:b7:1b:38:ec:5a:4d:30:be:14:37:27:b7:26:
         0b:19:3b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:03 2025 by rpki-client